CVEs published in December 2018
1,178 vulnerabilities, 184 critical, 11 exploited.
- synology diskstation manager (dsm), diskstation manager +1 moreCross-site scripting (XSS) vulnerability in info.cgi in Synology DiskStation Manager (DSM) before...6.5 Medium
- synology router manager, router manager (srm) +1 moreCross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1...6.5 Medium
- apache tikaApache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser6.5 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Software Privilege Escalation Vulnerability8.1 High
- mchange c3p0, debian linux +1 moreXML External Entity Reference in mchange:c3p09.8 Critical
- xmplayXMPlay 3.8.3 allows remote attackers to execute arbitrary code or cause a denial of service ...7.8 High
- libminglibming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a...8.8 High
- libminglibming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a...8.8 High
- libminglibming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a...8.8 High
- libminglibming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a...8.8 High
- libminglibming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.8.8 High
- comsenz discuzxDiscuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the...5.9 Medium
- comsenz discuzxDiscuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled...8.1 High
- comsenz discuzxDiscuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass...8.1 High
- craftcms craft cmsCraft CMS Cross-site Scripting (XSS) Vulnerability4.8 Medium
- ethereum go ethereumGo Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption)...7.5 High
- weberpIn webERP 4.15, Z_CreateCompanyTemplateFile.php has Incorrect Access Control, leading to the...4.9 Medium
- douco douphpDouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account.8.8 High
- wellintech kingscadaWellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability...7.5 High
- gnu libextractor, debian linux +1 moreGNU Libextractor through 1.8 has a NULL Pointer Dereference vulnerability in the function...6.5 Medium
- gnu libextractor, debian linux +1 moreGNU Libextractor through 1.8 has an out-of-bounds read vulnerability in the function...6.5 Medium
- debian linux, linux kernel, netapp active iq performance analytics services +1 more +3 moreThe function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8...4.6 Medium
- axiosys bento4An issue was discovered in Bento4 1.5.1-627. There is a heap-based buffer over-read in...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_StdcFileByteStream:...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.5.1-627. There is a memory leak in AP4_DescriptorFactory:...6.5 Medium
- bigtreecms bigtree** DISPUTED ** BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that...2.7 Low
- safe fme serverSafe Software FME Server through 2018.1 creates and enables three additional accounts in addition...8.8 High
- zoomtel 5352 firmwareZoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491...9.8 Critical
- ubeeinteractive dvw2108 firmware, dvw2110 firmware +1 moreUbee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover...9.8 Critical
- motorola sbg901 firmware, sbg941 firmware, svg1202 firmware +2 moreMotorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and...9.8 Critical
- skyworthdigital cm5100-440 firmware, cm5100-511 firmware, cm5100-ghd00 firmware +2 more +4 moreSkyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100...9.8 Critical
- mplustec cbc383z firmwaremplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote attackers to discover credentials via iso...9.8 Critical
- telaum ming2120j firmware, ming6300 firmware +1 moreNET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover...9.8 Critical
- net-wave ming6200 firmwareNETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials...9.8 Critical
- technicolor dwg849 firmware, dwg850-4 firmware, dwg855 firmware +1 more +3 moreThomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices...9.8 Critical
- technicolor cga0101 firmware, cga0111 firmware, dpc3928sl firmware +5 more +7 moreTechnicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E...9.8 Critical
- cisco dpc2100 firmwareS-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via...9.8 Critical
- teknotel cbw700n firmwareTEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via...9.8 Critical
- kaonmedia cg2001-an22a firmware, cg2001-udbna firmware, cg2001-un2na firmware +2 moreKaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote...9.8 Critical
- d-link dcm-604 firmware, dcm-704 firmware +1 moreD-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote...9.8 Critical
- comtrend cm-6200un firmware, cm-6300n firmware +1 moreComtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to...9.8 Critical
- bnmux bcw700j firmware, bcw710j2 firmware, bcw710j firmware +2 moreBnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to...9.8 Critical
- commscope arris sbg6580-2 firmwareARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover...9.8 Critical
- castlenet cbv38z4ec firmware, cbv38z4ecnit firmware, cbw383g4j firmware +1 more +3 moreCastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT,...9.8 Critical
- inovobb ib-8120-w21 firmware, ib-8120-w21e1 firmware +1 moreiNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899...9.8 Critical
- arris dg950s firmware, commscope arris dg950a firmware +1 moreARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover...9.8 Critical
- jezetek-intl bcm93383wrg firmwareJiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to...9.8 Critical
- technicolor dpc2320 firmwareTechnicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover...9.8 Critical
- ubeeinteractive ambit ddw2600 firmware, ambit ddw2602 firmware, ambit t60c926 firmware +1 more +3 moreAmbit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices...9.8 Critical
- technicolor dpc3928sl firmwareTechnicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross...4.7 Medium
- Show moreLoading…